A pay-per-lead or pay-per-click affiliate program pays partners for an action that happens before the sale: a qualified lead, or a validated click. It’s a great fit when the valuable moment for your business is a demo, a trial, a waitlist signup, or seeded traffic to a new offer, rather than an immediate purchase. The catch, and the reason most guides skip straight past it, is that the moment you pay for an action instead of a sale, you have to be sure the action is real. This guide walks through when to run one, how to set it up, and how to keep it honest.
I build affiliate tracking and payout software (Rekomi) and run a program of my own, so I’ve set these up from both sides: the brand paying, and the partner getting paid. Cost-per-sale is still my default recommendation for most SaaS and stores, because you only pay when revenue actually shows up. But CPC and CPL earn their place for real reasons, and when they fit, they fit well.
CPC, CPL, and CPS: which model pays for what
Three models, three moments you’re paying for. Picking the right one is mostly about where the value lands in your funnel.
- CPS (cost per sale): you pay a percentage or a flat fee when a sale closes. Best for recurring SaaS and storefronts, where the sale is the goal and you’d rather tie spend directly to revenue.
- CPL (cost per lead): you pay a set bounty for a qualified lead: a demo request, a trial start, a waitlist signup. Best when the sale happens later (a sales call, a trial-to-paid window) and the lead itself is the thing worth rewarding.
- CPC (cost per click): you pay a set rate per validated click. Best for audience seeding, a new-offer launch, or syndication deals where you’re paying a partner to send interested traffic.
Here’s the honest trade-off, stated plainly: CPS is the safest because a fake sale is very hard to manufacture (real money has to change hands). CPL and CPC move the payment earlier, closer to the traffic, which is exactly what makes them useful and also exactly what makes them a target. That’s not a reason to avoid them. It’s a reason to run them on a platform that validates the traffic before it pays.
How to run a pay-per-lead affiliate program
Start by defining the lead precisely, because “lead” is where these programs get expensive if you’re vague. A lead should be a specific, checkable action: a completed demo form, a trial account created, a newsletter signup with a confirmed email. The tighter the definition, the less room there is for junk.
From there, the setup is short:
- Set the bounty. Pick a per-lead amount you can pay profitably given your lead-to-customer rate. If 1 in 10 leads becomes a customer worth $600, a $20 lead bounty means $200 in payouts per customer, which may or may not work depending on your margins. Run that math first.
- Keep it invite-only. Choose the partners who can send leads rather than opening it to anyone. A pay-per-lead program that anyone can join is a bounty anyone can farm.
- Set a campaign budget cap. Cap total spend so a surprise spike can’t run away from you before you’ve reviewed it.
- Post the lead reliably. Send the lead to your platform from your form or your backend, so attribution is server-side and not dependent on a pixel that can be blocked.
- Validate every lead. A bot challenge, an email-format and disposable-domain check, a guard against affiliates submitting their own address, and real-time IP fraud scoring, so a “lead” that’s actually a bot or a self-submission never earns.
On Rekomi, those last two are built in: leads post server-to-server, and every one runs through the fraud checks before it’s payable. That’s the difference between a lead program you can trust and one you have to audit by hand every month.

How to run a pay-per-click affiliate program
A pay-per-click program is simpler to describe and harder to keep clean, because a click is the cheapest action to fake. The setup mirrors CPL, with the fraud layer doing even more of the work.
- Set a per-click rate you can afford across the volume you expect, and pair it with a budget cap. CPC spend scales with traffic, so the cap is your safety rail.
- Invite your partners and give each a tracking link. Keep it invite-only so you know who’s sending what.
- Score every click in real time. Check IP reputation, proxy and VPN and data-center origin, and bot signals at the moment of the click. Hold anything high-risk out of payment.
- Cap per IP and per affiliate, and de-duplicate. One IP or device shouldn’t be able to earn unlimited clicks, and repeat clicks from the same visitor should collapse to one.
- Fail closed. If a click can’t be scored, hold it, don’t pay it. This single rule is what keeps a bad night from becoming a bad invoice.
My stance, after watching a lot of click traffic: if a platform pays clicks first and checks them later (a nightly cleanup after the money’s moved), that’s the single biggest red flag you can find. Real-time, pre-payout scoring is the whole ballgame for CPC. Everything else is secondary.
The worked example: does a lead program actually pay?
Numbers make this concrete. Say you sell a $50/mo SaaS product, customers stay about 12 months (so a customer is worth roughly $600 in lifetime value), and 1 in 8 qualified trial signups converts to paid.
You set a CPL bounty of $15 per qualified trial. Eight leads cost you $120 in bounties and produce one customer worth $600, so your partner cost is about 20% of that customer’s lifetime value. That’s a healthy number for most SaaS. Now say a fraudulent partner sends 200 fake trial signups in a weekend: at $15 each with no validation, that’s $3,000 out the door for zero customers. With real-time fraud scoring, those 200 land as high-risk, get held out of payment, and cost you nothing. Same program, same weekend, and the only variable that changed the outcome by $3,000 was whether the leads were validated before they paid.
That’s the whole case for CPC and CPL in one example: the model is genuinely good economics when the traffic is real, and a disaster when it isn’t. The validation layer is what decides which one you get.
What it costs to run one
On Rekomi, CPC and CPL are included on every paid plan (starting at $19/mo), alongside cost-per-sale, so you’re not paying extra to switch them on. You set the per-click or per-lead rate you pay your affiliates, and Rekomi charges a flat 3% on payouts (2.5% on Enterprise), only when affiliates actually earn. The fraud scoring, the invite-only controls, the budget caps, and the done-for-you payouts all come with it. You can see the full breakdown on the pricing page, and the dedicated pay-per-lead and pay-per-click pages show how each model works end to end.

Frequently asked questions
What is a pay-per-lead affiliate program?
It’s a program where you pay affiliates a fixed bounty for each qualified lead they send, such as a demo request or trial signup, rather than a share of a sale. It works best when your sale closes later in the funnel and the lead is the action worth rewarding. The key is a tight definition of “qualified” plus validation so fake leads don’t earn.
What is a pay-per-click affiliate program?
It’s a program where affiliates earn a set rate for each validated click they send to your site, useful for seeding traffic to a new offer or syndication deals. Because a click is cheap to fake, a pay-per-click program only works well with real-time fraud scoring, per-IP and per-affiliate caps, and a budget cap.
Is CPC or CPL better than cost per sale?
Not better, different. Cost per sale ties spend directly to revenue and is the safest default. CPC and CPL are the right call when the valuable action happens before the sale, or when you’re paying to build awareness and pipeline. Many brands run more than one at once, a different model per campaign, which Rekomi supports natively.
How do you prevent fraud in a pay-per-click or pay-per-lead program?
You score every click and lead in real time against live IP reputation (proxy, VPN, Tor, data center, and bot signals) before it can be paid, hold anything high-risk for review, cap paid actions per IP and per affiliate, and fail closed so unscored traffic never earns. Our fraud protection page covers the full stack, and the affiliate fraud guide covers the wider set of tricks.
Do this next
Write down the one action in your funnel that’s actually worth paying a partner for: a sale, a qualified lead, or a click. That single answer tells you which model to run. Then check that whatever platform you use validates that action before it pays, because on CPC and CPL that’s the difference between a program that grows your pipeline and one that quietly funds bots. If you want to run one with the fraud layer already built in, you can start a 14-day trial and have a campaign live the same afternoon!



